Add insert-methode secure against sql-injection